It attempted to upload malicious files to the SSH server.

The IP attempted to delete directories on the SSH server.

The IP attempted to download sensitive files from the SSH server.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

This IP belongs to New York Life Insurance.

This IP was detected distributing spyware-infected USB drives to our users.

This IP belongs to Anthem.

This IP belongs to United Parcel Service.

It made multiple requests with the same Expect header.

This IP belongs to Target.

This IP belongs to OVH.

This IP belongs to Wells Fargo.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

This IP belongs to Anthem.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This IP belongs to CHS.

This IP was detected distributing spyware-infected USB drives to our users.

This IP belongs to Philip Morris International.

This IP belongs to MTN.

This IP has been observed spreading mobile malware, targeting our company application users.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

udden increase in account lockouts due to multiple failed login attempts.

This IP belongs to United Technologies.